Re: AD Authentication?

2008-03-05 Thread Ben Scott
On Wed, Mar 5, 2008 at 12:30 PM, Tom Buskey <[EMAIL PROTECTED]> wrote: > It seems to require that every Unix user have an AD account with a valid > password. No password, no access. Um... isn't that kinda the point? :-) -- Ben ___ gnhlug-discuss mai

Re: AD Authentication?

2008-03-05 Thread Tom Buskey
On Tue, Mar 4, 2008 at 3:44 PM, Ben Scott <[EMAIL PROTECTED]> wrote: > On Tue, Mar 4, 2008 at 3:02 PM, Kenny Lussier <[EMAIL PROTECTED]> wrote: > > What if I can touch the AD servers? Or, at least, I sit next to the > > guy that can touch the AD servers? Are there other options? > > SFU (Servi

Re: AD Authentication?

2008-03-04 Thread Ted Roche
Ben Scott wrote: > On Tue, Mar 4, 2008 at 3:02 PM, Kenny Lussier <[EMAIL PROTECTED]> wrote: >> What if I can touch the AD servers? Or, at least, I sit next to the >> guy that can touch the AD servers? Are there other options? > > SFU (Services For Unix, "free", from Microsoft) aims to make Win

Re: AD Authentication?

2008-03-04 Thread Ben Scott
On Tue, Mar 4, 2008 at 3:02 PM, Kenny Lussier <[EMAIL PROTECTED]> wrote: > What if I can touch the AD servers? Or, at least, I sit next to the > guy that can touch the AD servers? Are there other options? SFU (Services For Unix, "free", from Microsoft) aims to make Windows speak Unix protocols

Re: AD Authentication?

2008-03-04 Thread Kenny Lussier
On Tue, Mar 4, 2008 at 9:30 AM, Matt Brodeur <[EMAIL PROTECTED]> wrote: > > On Tue, Mar 04, 2008 at 08:38:25AM -0500, Kenny Lussier wrote: > > > > If you absolutely can't touch the AD servers you'll have to look at > Samba's Winbind. IIRC, you'll want a separate LDAP server to store > the SID

Re: AD Authentication?

2008-03-04 Thread Thomas Charron
On Tue, Mar 4, 2008 at 12:44 PM, Ben Scott <[EMAIL PROTECTED]> wrote: > In any serious Unix/Windows integration effort of non-trivial size, > I would recommend going through the effort to make sure Unix IDs are > consistent across all hosts. If you're working in the "single user > workstation

Re: AD Authentication?

2008-03-04 Thread Ben Scott
On Tue, Mar 4, 2008 at 9:50 AM, Thomas Charron <[EMAIL PROTECTED]> wrote: > This will only be a problem if you are doing something akin to NFS > mounting of drivers and maintaining permissions. In any serious Unix/Windows integration effort of non-trivial size, I would recommend going through

Re: AD Authentication?

2008-03-04 Thread Ben Scott
On Tue, Mar 4, 2008 at 8:38 AM, Kenny Lussier <[EMAIL PROTECTED]> wrote: > Does anyone know of any recent, good docs on using a Windows Active > Directory server to authenticate Linux desktops? Winbind -- part of Samba -- can act as a NSS backend, making Windows accounts appear as native Unix

Re: AD Authentication?

2008-03-04 Thread Lloyd Kvam
We have at least two Samba books in the library that look like they would be useful for this. (library links are below) On Tue, 2008-03-04 at 08:38 -0500, Kenny Lussier wrote: > Hi all, > > Does anyone know of any recent, good docs on using a Windows Active > Directory server to authenticate Lin

Re: AD Authentication?

2008-03-04 Thread Thomas Charron
On Tue, Mar 4, 2008 at 9:30 AM, Matt Brodeur <[EMAIL PROTECTED]> wrote: > On Tue, Mar 04, 2008 at 08:38:25AM -0500, Kenny Lussier wrote: > If you absolutely can't touch the AD servers you'll have to look at > Samba's Winbind. IIRC, you'll want a separate LDAP server to store > the SID-UID mappi

Re: AD Authentication?

2008-03-04 Thread Matt Brodeur
On Tue, Mar 04, 2008 at 08:38:25AM -0500, Kenny Lussier wrote: > > Does anyone know of any recent, good docs on using a Windows Active > Directory server to authenticate Linux desktops? I am currently > working in a place that has a Windows infrastructure (AD, Exchange, > etc.), but we need to be a

Re: AD Authentication?

2008-03-04 Thread Mark Komarinski
On 03/04/2008 08:38 AM, Kenny Lussier wrote: > Hi all, > > Does anyone know of any recent, good docs on using a Windows Active > Directory server to authenticate Linux desktops? I am currently > working in a place that has a Windows infrastructure (AD, Exchange, > etc.), but we need to be able to u

Re: AD Authentication?

2008-03-04 Thread Thomas Charron
On Tue, Mar 4, 2008 at 8:38 AM, Kenny Lussier <[EMAIL PROTECTED]> wrote: > Hi all, > Does anyone know of any recent, good docs on using a Windows Active > Directory server to authenticate Linux desktops? I am currently > working in a place that has a Windows infrastructure (AD, Exchange, > etc.

AD Authentication?

2008-03-04 Thread Kenny Lussier
Hi all, Does anyone know of any recent, good docs on using a Windows Active Directory server to authenticate Linux desktops? I am currently working in a place that has a Windows infrastructure (AD, Exchange, etc.), but we need to be able to use the existing central authentication for a new fleet o